Specify ACL for CQ new patchset runs

To fix a validation error [1].

[1] https://boringssl-review.googlesource.com/c/boringssl/+/79227/5/infra/config/main.star#199

Change-Id: I079ed71a0b6dba34d56c9b6513a56caaec8a743b
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/80607
Auto-Submit: Lily Chen <chlily@google.com>
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>

infra/config/generated/commit-queue.cfg

diff --git a/infra/config/generated/commit-queue.cfg b/infra/config/generated/commit-queue.cfg
index 2268677..a3eae35 100644
--- a/infra/config/generated/commit-queue.cfg
+++ b/infra/config/generated/commit-queue.cfg
@@ -24,6 +24,7 @@
     gerrit_cq_ability {
       committer_list: "project-boringssl-committers"
       dry_run_access_list: "project-boringssl-tryjob-access"
+      new_patchset_run_access_list: "project-boringssl-tryjob-access"
     }
     tryjob {
       builders {

infra/config/main.star

diff --git a/infra/config/main.star b/infra/config/main.star
index 214458a..1115988 100755
--- a/infra/config/main.star
+++ b/infra/config/main.star
@@ -45,6 +45,10 @@
             groups = "project-boringssl-tryjob-access",
         ),
         acl.entry(
+            roles = acl.CQ_NEW_PATCHSET_RUN_TRIGGERER,
+            groups = "project-boringssl-tryjob-access",
+        ),
+        acl.entry(
             roles = acl.SCHEDULER_OWNER,
             groups = "project-boringssl-admins",
         ),